[Savannah-cvs] savannah ./ChangeLog frontend/php/docs/mrtg.php...

[Mathieu Roy]

CVSROOT:        /cvsroot/savannah
Module name:    savannah
Changes by:     Mathieu Roy <address@hidden>    03/04/25 09:34:50

Modified files:
        .              : ChangeLog 
        frontend/php/docs: mrtg.php webalizer.php 
        frontend/php/include: utils.php 

Log message:
        In case of an apparently malicious url, do not try to rewrite the url 
but exit(); As noticed by babar, it's possible to play with the rewriting of 
the url to get something still malicious

CVSWeb URLs:
http://savannah.gnu.org/cgi-bin/viewcvs/savannah/savannah/ChangeLog.diff?tr1=1.372&tr2=1.373&r1=text&r2=text
http://savannah.gnu.org/cgi-bin/viewcvs/savannah/savannah/frontend/php/docs/mrtg.php.diff?tr1=1.11&tr2=1.12&r1=text&r2=text
http://savannah.gnu.org/cgi-bin/viewcvs/savannah/savannah/frontend/php/docs/webalizer.php.diff?tr1=1.26&tr2=1.27&r1=text&r2=text
http://savannah.gnu.org/cgi-bin/viewcvs/savannah/savannah/frontend/php/include/utils.php.diff?tr1=1.43&tr2=1.44&r1=text&r2=text